13 Commits
Author SHA1 Message Date
Zach Kellingandzeekay 1dd58828d7 refactor: update dependencies to use external packages 2026-07-26 10:19:06 -07:00
Zach Kellingandzeekay eb270d8d50 initial commit 2026-07-26 10:19:05 -07:00
zeekayandHanzo Dev 2313d84f08 feat(identity): add cycle-free ServiceIdentity + Hybrid (mnemonic-derived ML-DSA-65 service auth)
service_identity.go + hybrid.go are pure-function, I/O-free derivation (BIP-39
-> BIP-32 -> ML-DSA-65 NodeID) that imports only luxfi/crypto + go-bip32/39 +
ids — NO kms import, so no keys<->kms cycle. Previously these lived only
vendored-in-kms; consumers (hanzoai/kms/sdk, bank, kms-operator) referenced
keys.ServiceIdentity/NewServiceIdentity that the released keys lacked. This is
the canonical home. (LoadMnemonic stays out of keys — it needs kms/zapclient.)

Co-authored-by: Hanzo Dev <dev@hanzo.ai>
2026-06-30 15:13:50 -07:00
zeekayandHanzo Dev 964089cf57 fix(deps): repair vanished pins / go.sum drift ( tidy) + build green
Co-authored-by: Hanzo Dev <dev@hanzo.ai>
2026-06-30 13:54:01 -07:00
Hanzo Dev 9283892da2 security: remove hardcoded mnemonic — use KMS 2026-03-24 18:07:32 -07:00
Zach Kelling 5505743592 chore: sync dependencies and format code 2026-02-04 15:46:17 -08:00
Zach Kelling 2f64011cdd fix: migrate from vm/platformvm/signer to protocol/p/signer
Break import cycle by using protocol package for signer interface.
2026-01-26 08:10:35 -08:00
Zach Kelling 2397e86893 refactor: update dependencies to use external packages 2026-01-09 00:00:18 -08:00
Zach Kelling 4a09520e83 chore: update to github.com/luxfi/const v1.4.0
Rename dependency from luxfi/constants to luxfi/const for brevity.
2025-12-29 14:17:59 -08:00
Zach Kelling 14c18f8fd9 deps: upgrade node to v1.22.45
- node v1.22.45 has NewCertAndKeyBytesFromKey function
2025-12-22 07:13:08 -08:00
Zach Kelling 6a5ea5376a deps: upgrade node to v1.22.44
- node v1.22.44 has NewCertAndKeyBytesFromKey function
2025-12-22 07:06:56 -08:00
Zach Kelling 75db4cb7bb feat: add deterministic validator key derivation from mnemonic
- Add DeriveValidatorsFromMnemonic and DeriveValidatorFromMnemonic
- Derive EC keys using BIP44 path m/44/9000/0/0/{index}
- Derive TLS keys using BIP44 path m/44/9000/1/0/{index}
- Derive BLS keys using BIP44 path m/44/9000/2/0/{index}
- Add deriveP256Key for deterministic TLS cert generation
- Auto-generate missing TLS certs when loading from directory
- Keys persist to disk for stable NodeIDs across restarts
2025-12-22 06:26:43 -08:00
Zach Kelling 84059d6ece initial commit 2025-12-21 16:57:13 -08:00